Here’s a rough breakdown of when iPhone-tracking is generally lawful, and when it can cross the line into criminal territory. Keep in mind that specific rules vary by jurisdiction, so you should always check your state’s laws or get legal advice if you’re unsure.
-
Tracking with explicit, informed consent
• “Find My” Family Sharing or “Share My Location” in iOS: every participant opts in and can stop sharing at any time.
• Third-party apps (e.g. Life360, Glympse) when all parties know and agree in advance.
Why it’s lawful: you’ve got clear, documented consent and an obvious “on/off switch.” -
Parental control over minors
• Under U.S. law, parents or legal guardians generally have broad rights to monitor their under-18 children’s devices.
• Built-in Apple tools (Family Sharing, Screen Time) let you see location, set boundaries, get alerts for crossing geofences, etc.
Best practices:
– Explain to your child what you’re doing and why (safety, emergencies).
– Use monitoring sparingly—avoid 24/7 “Big Brother” unless there’s a real safety concern. -
Employer-issued devices (with notice & policy)
• If your company owns the iPhone and you’ve given employees written notice that location may be monitored, it’s usually lawful.
• Must comply with labor laws, data-protection regulations (e.g. GDPR in Europe). -
Law enforcement or court orders
• Police or investigators need a warrant or court order under the Electronic Communications Privacy Act (ECPA) or similar statutes.
• Unauthorized tracking by private individuals posing as police is illegal. -
When you risk criminal charges
• Secret tracking apps or “spyware” installed without the phone-owner’s full knowledge/consent.
• Capturing or intercepting data streams (e.g. live GPS pings) without lawful authority can violate the federal Wiretap Act or state eavesdropping laws.
• Repeated unwanted “check-ins” or geofence alerts can constitute stalking or harassment under many state statutes.
• Using someone’s Apple ID/password to log into “Find My” without permission may be identity theft or unauthorized access.
Key state and federal laws often cited
• Federal Wiretap Act (part of ECPA): prohibits the interception of electronic communications.
• Stored Communications Act: covers unauthorized access to cloud-based location or communications data.
• Many states have their own “anti-stalking,” “anti-harassment,” or “privacy” statutes.
Best practices for responsible monitoring
• Always get clear, preferably written, consent from adults you track.
• Be transparent with kids or employees—explain how the data will be used and when you’ll stop collecting it.
• Regularly review your monitoring policies to ensure you’re respecting privacy and local laws.
Resources for further reading
• Electronic Frontier Foundation (EFF): privacy guides and state-by-state summaries
• Apple’s “Family Sharing” and “Find My” support pages
• Your state’s data-privacy or stalking statutes (often found on the Attorney General’s website)
Bottom line
• Lawful when there’s informed consent (or clear parental/employer/legal authority).
• Illegal—and potentially criminal—when done secretly, against someone’s will, or without a valid legal basis.
Whenever in doubt, get a qualified attorney to review your particular situation.